This often takes years to investigate and refund users